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What is claimed is: 




communication medium 



A method c omprising 
making at least on<; digital facility available from a source to users via an electronic 



associating with 
access at least one of the 



at least one of the users an access permission that enables the user to 
digital facilities, and 



associating with 
give to another user a permission 




least one of the users a grant permission that enables the user to 
with respect at least one of the digital facilities. 




2. The method of claim 1 in which the permission that is granted to another user 
comprises a perform perrjiission 

3. The meth6d of claim 1 in which the permission that is granted to another user 

comprises a grant permij sion. 
^ 

The method of claim 1 in whi£h the digital facility comprises data 
The method of claim 1 in which the digital facility comprises a service. 

6. The method of claim 1 in which the source comprises a web server. 

7. The method pi claim 1 in which the users comprise individuals using web 
browsers. 

8. Theinethod of claim 1 in which the users are employees of companies. 

9. /The method of claim 1 in which the electronic communication medium 
comprises tKe Internet. 

1 0. The method of claim 1 ij/ which the user can give the other user both access 
ermission and grant permission. 



11. The method of claim 1 in which the digital facility comprises an application 
program, and the application/defines the permissions. 
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12. The method of claim 1 in which the users comprise individuals who are 
associated with respective companies, and the permissions comprise company permissions 

>ociated with one of the companies and individual permissions 
user. 



that apply to individuals as 
that apply individually to a 



13. The method of claim 1 in which at least one of the permissions comprises an 



aggregate of other permiss 



ons. 



14. The methocl of claim 13 in which the aggregate permission includes 



fundamental permissions 



lhat have arguments of a common type. 



15. The metho I of claim 13 in which the other user's permission with respect to 
the digital facility is deter nined by a combination of individual permissions and company 



permissions. 

16. A medium 
machine to: 

make at least one 
communication medium 




associate with at 
access at least one of the 



^ associate with at 

to another user a 



storing a software program that is capable of configuring a 



digital facility available from a source to users via an electronic 



east one of the users an access permission that enables the user to 
digital facilities, and 



east one of the users a grant permission that enables the user to give 
permission with respect at least one of the digital facilities. 



17. Apparatus comprising 



means for makiiig 
electronic communication 



means for assoc: 
the user to access at leafet 



means for 
user to give to another 



at least one digital facility available from a source to users via an 
medium, 



ating with at least one of the users an access permission that enables 
it one of the digital facilities, and 



associating with at least one of the users a grant permission that enables the 
user a permission with respect at least one of the digital facilities. 
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1 8 . Apparatus comprising 

t 
i 

a source of digital facilities, 



an electronic communication medium coupled between the source and users to make 



the facility available to the 



storage containing 
at least one of the users an 
the digital facilities, and 



information identifying an access permission that associates with 
access permission that enables the user to access at least one of 



storage containing 
give to another user a 



sers, 



nformation identifying a grant permission that enables the user to 
pernjission with respect at least one of the digital facilities. 




19. A method c omprising 

making business information of a portal-providing company company available to 
individuals using a web server and web browsers, 

associating with at least one of the individuals an access permission that enables the 
user to access the business information, and 

associating with at least one of the users a grant permission that enables the user to 
give to another user a permission with respect to the business information. 



20. A method 



composing 



providing a web site, 

using the web site, interacting with web browsers of users, 



in response to a 
permission to have the 



Request from a user to the web site, determining if the user has 
request served, 



enabling one of 
permission to have a particular 
the ability to grant perntiissions 



he users to grant to another of the user selectively either only a 

type of request served, only a permission to grant other users 
, or both. 
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21. A method comprising 




maintaining a database of information that associates each user of a digital facility 
ailable from a sourc^with permissions that define the rights of the user to access the digital 
facility or to granj/to other users the rights with respect to the digital facility, or both, and 

ending users who have the permission to do so, to alter the permissions associated 
with the^user. 



22. The metho 
profiles in the database 




21 in which the permission information is stored as user 



>^yXz3. The method of claim 21 in which the users interact with the database through 
/eb server/web browser pair in altering the permissions. 

24. The method of claim 21 in which the permissions comprise cascading 
permissions. 

25. The method of dlaim 21 in which the users belong to entities and the database 
also stores information about permissions that define rights of all of the users who belong to 
a given one of the entities. 

26. The method df claim 21 in which the database also stores information about 
aggregate permissions that comprise predefined sets of individual permissions. 

27. A method comprising 

making at least one digital facility available from a source to users via an electronic 
communication medium,/ 



maintaining a database of profiles that define permissions of users and companies to 
access the digital facility, 

authorizing at llast one user to create profiles for other users, and 

automatically making a user who creates a profile for another user or for a company, 
a manager of the prof le of the other user or the company. 
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